Approved changes feed: RSS · Atom

cpe:2.3:a:mingsoft:mcms:5.4.3:*:*:*:*:*:*:*

part: a version: 5.4.3 update: *

VendorMingsoft (eb40bbd4-cf90-5441-862d-0610394bbddf)
ProductMcms (3c194228-42fa-5fd1-8adf-8c97a9695f34)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/ming-soft/mcms purl2cpe 2026-06-01 10:14:40.770452
pkg:maven/net.mingsoft/ms-mcms purl2cpe 2026-06-01 10:14:40.770453

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-29287 vulnerable 2026-06-08 07:14:56.400239 Details available
An arbitrary file upload vulnerability in the ueditor component of MCMS v5.4.3 allows attackers to execute arbitrary code via uploading a crafted file.
Published: 2025-04-21T00:00:00.000Z
Updated: 2026-07-05T00:58:41.807Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.